deploy-check
starsforks
How to install deploy-check?
faizkhairi/claude-code-blueprint/deploy-check
$npx -y skills add faizkhairi/claude-code-blueprint --skill deploy-checkMUST use before any git push to main/master/production, or when user mentions 'deploy', 'going live', 'push to prod', 'ready to ship', 'merge to main', 'release'. Also trigger before any npm publish for CLI tools, or on 'audit', 'check vulnerabilities', 'are our deps safe?', 'npm
SKILL.md
| 1 | Pre-deployment validation for $ARGUMENTS environment: |
| 2 | |
| 3 | 1. **Tests**: Run full test suite, all must pass |
| 4 | 2. **Git status**: Check for uncommitted changes across all repos |
| 5 | 3. **Schema sync**: Verify the project's ORM/DB schema definition matches expectations (e.g. Prisma schema, Django models, Rails schema.rb, migrations directory) |
| 6 | 4. **Secrets check**: Scan for hardcoded credentials, API keys, passwords |
| 7 | 5. **Dev artifacts**: Check for language-appropriate debug/print statements (console.log, print(), System.out.println, fmt.Println, etc.), debugger statements, TODO/FIXME in production paths |
| 8 | 6. **Env vars**: Verify required environment variables are documented |
| 9 | 7. **Auth coverage**: Validate all API endpoints have auth middleware |
| 10 | 8. **Dependency audit**: Run the ecosystem's dependency audit (`npm audit`/`yarn audit`, `pip-audit`, `bundle audit`, `cargo audit`, `govulncheck`, etc., detected from the manifest/lockfile). Classify: CRITICAL/HIGH (action required) vs MODERATE/LOW (note). Separate production vs dev-only vulnerabilities. Check for auto-fixable with `--dry-run`. |
| 11 | 9. **Build**: Verify project builds without errors |
| 12 | 10. **Migration safety**: Check if any ORM models/migrations are missing (risk of tables dropped by destructive sync) |
| 13 | |
| 14 | If argument is "audit" → run only step 8 (dependency vulnerability scan) across the current project. |
| 15 | |
| 16 | ## GO/NO-GO Criteria |
| 17 | - **NO-GO**: Any test failure, hardcoded secret found, ORM model/migration missing, build failure, or CRITICAL/HIGH vulnerability in production deps |
| 18 | - **GO**: All steps pass. MODERATE/LOW vulnerabilities in dev-only deps are acceptable with note. |
| 19 | - **GO with warnings**: All critical steps pass but non-blocking issues exist (dev-only vulns, TODO items in non-critical paths) |
| 20 | |
| 21 | Output: GO / NO-GO status with detailed checklist results. |
People who liked this also viewed
6 picksType
- microsoft-foundryDeploy, evaluate, fine-tune, and manage Foundry agents end-to-end with azd: hosted agent scaffold/run/deploy, prompt agent create, batch eval, continuous eval, prompt optimizer, Agent Optimizer scaffoSkillsJul 2026
- azure-deployExecute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application SkillsJul 2026
- azure-preparePrepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wSkillsJul 2026
- azure-validate--- name: azure-validate description: "Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity pSkillsJul 2026
- azure-aigatewayConfigure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbSkillsJul 2026
- azure-hosted-copilot-sdkOfficial agent plugin providing skills and MCP server configurations for Azure scenarios.SkillsJul 2026
